Same here even with latest kernel and all updates installed (@ 29-01-2018)
so i am probably on ver 6.4.1 ( yet haven't manually changed this number thing in lsb-release file)
OS: ArchMerge v6.3.1 / Kernel: 4.14.15-1-ARCH
----
/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Vulnerable
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic retpoline
-------
Seems like i have to live with it i don't have any hope for any fixes to this ''old metal'' anyway